Automatically reported by fail2ban report script (mx1)

GET /news/wp-login.php

Lines containing failures of 27.211.211.36
Aug 24 01:44:34 mellenthin sshd[26235]: Invalid user pi from 27.211.211.36 port 35192
Aug 24 01:44:34 mellenthin sshd[26237]: Invalid user pi from 27.211.211.36 port 35198
Aug 24 01:44:34 mellenthin sshd[26235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.211.211.36


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=27.211.211.36

2020-08-26 22:36:52.049113-0500  localhost smtpd[75750]: NOQUEUE: reject: RCPT from unknown[42.118.142.1]: 554 5.7.1 Service unavailable; Client host [42.118.142.1] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/42.118.142.1; from= to= proto=ESMTP helo=<[42.118.142.1]>

Port scan on 3 port(s): 8081 8082 8181

SSH login attempts.

Invalid user maryam from 178.62.241.56 port 54950

2020-08-27T07:10:39.809543mail.standpoint.com.ua sshd[29672]: Invalid user web94p2 from 112.140.185.64 port 56828
2020-08-27T07:10:39.812107mail.standpoint.com.ua sshd[29672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.140.185.64
2020-08-27T07:10:39.809543mail.standpoint.com.ua sshd[29672]: Invalid user web94p2 from 112.140.185.64 port 56828
2020-08-27T07:10:41.480606mail.standpoint.com.ua sshd[29672]: Failed password for invalid user web94p2 from 112.140.185.64 port 56828 ssh2
2020-08-27T07:11:46.596982mail.standpoint.com.ua sshd[29799]: Invalid user xerox from 112.140.185.64 port 46034
...

2020-08-26 22:39:08.406275-0500  localhost smtpd[76455]: NOQUEUE: reject: RCPT from unknown[211.209.60.23]: 554 5.7.1 Service unavailable; Client host [211.209.60.23] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/211.209.60.23 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<[211.209.60.23]>

2020-08-26 22:36:04.069746-0500  localhost smtpd[75750]: NOQUEUE: reject: RCPT from unknown[148.63.120.241]: 554 5.7.1 Service unavailable; Client host [148.63.120.241] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/148.63.120.241; from= to= proto=ESMTP helo=<241.120.63.148.rev.vodafone.pt>

Icarus honeypot on github

Dovecot Invalid User Login Attempt.

(From eric@talkwithwebvisitor.com) Cool website!

My name’s Eric, and I just found your site - bennettchiro.net - while surfing the net. You showed up at the top of the search results, so I checked you out. Looks like what you’re doing is pretty cool.
 
But if you don’t mind me asking – after someone like me stumbles across bennettchiro.net, what usually happens?

Is your site generating leads for your business? 
 
I’m guessing some, but I also bet you’d like more… studies show that 7 out 10 who land on a site wind up leaving without a trace.

Not good.

Here’s a thought – what if there was an easy way for every visitor to “raise their hand” to get a phone call from you INSTANTLY… the second they hit your site and said, “call me now.”

You can –
  
Talk With Web Visitor is a software widget that’s works on your site, ready to capture any visitor’s Name, Email address and Phone Number.  It lets you know IMMEDIATELY – so that you can talk to that lead while they’re literally looking over your si

2020-08-27T06:16:16.752679server.espacesoutien.com sshd[505]: Failed password for root from 218.92.0.210 port 40408 ssh2
2020-08-27T06:16:20.128667server.espacesoutien.com sshd[505]: Failed password for root from 218.92.0.210 port 40408 ssh2
2020-08-27T06:17:27.740411server.espacesoutien.com sshd[521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.210  user=root
2020-08-27T06:17:29.853786server.espacesoutien.com sshd[521]: Failed password for root from 218.92.0.210 port 45606 ssh2
...

Aug 27 07:51:12 PorscheCustomer sshd[15571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.189.123.190
Aug 27 07:51:14 PorscheCustomer sshd[15571]: Failed password for invalid user ljm123 from 35.189.123.190 port 44816 ssh2
Aug 27 07:55:44 PorscheCustomer sshd[15612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.189.123.190
...

Attempted Brute Force (dovecot)

xmlrpc attack